0vulns-dependency-confusion-poc

GHSA-wwc9-c8g2-66r2

Malicious code in 0vulns-dependency-confusion-poc (npm)

Details

**Severity:** Critical

**Affected versions:** `= 1.0.0`

The package communicates with a domain associated with malicious activity.## Source: amazon-inspector (3d282025fb2ec1b4012e3b979cec1f66520e643fcadfd2864e54989de50dd00d)
The package.json preinstall script runs `wget` against an attacker-controlled webhook.site URL, passing `$(whoami)`, `$(pwd)`, and `$(hostname)` as query parameters, executing automatically on `npm install`. This matches the npm-lifecycle-external-fetch and credential/telemetry exfiltration patterns (findings a static pattern match, a static pattern match, a static pattern match, a static pattern match, a static pattern match). the analysis confirms contextually that the script performs reconnaissance exfiltration to a non-registry collector, and config.unsafe-perm is set to ensure execution. the analysis further notes that the declared main entrypoint is missing and the tarball contains only package.json — the package exists solely to trigger the beacon, with no legitimate runtime functionality. Self-identification as a 'PoC' does not change the risk to an unintended installer (e.g., via dependency confusion).

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/fc84852a6b288884e6aa6820251bcd1312157f1f/osv/malicious/npm/0vulns-dependency-confusion-poc/MAL-2025-5016.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/fc84852a6b288884e6aa6820251bcd1312157f1f/osv/malicious/npm/0vulns-dependency-confusion-poc/MAL-2025-5016.json
- https://www.npmjs.com/package/0vulns-dependency-confusion-poc/v/1.0.0
- https://github.com/ossf/malicious-packages/blob/090d6d2336055bbb52c865221cd7d4c0a28a3fe2/osv/malicious/npm/0vulns-dependency-confusion-poc/MAL-2025-5016.json
- https://github.com/advisories/GHSA-wwc9-c8g2-66r2

Compromised versions (1)

= 1.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.